Baccarat Pacific: unauthorized access to its servers may have leaked about 300,000 customer records in Japan, and part was published online
It confirmed unauthorized access on September 22 and a ransom was demanded. Some customer data was published online on October 20. About 300,000 records in Japan may have leaked.
Disclosed
2023-10-31
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
It confirmed unauthorized access to its information equipment by a third party and cut the equipment off from the network. It also reported to the Personal Information Protection Commission. [1] [3]
It learned that part of the information had been published on the internet. [1]
It published an update, confirming that part of the customer data was published. It describes the attack as ransomware, saying a ransom was demanded of its French headquarters. [1] [3]
Impact
In October it announced that some activities, including the online shop, were restricted. About 300,000 customer records in Japan may have leaked, with name, address, phone number, birth date, email address, occupation and company name. It does not store credit card data, which is out of scope. [1] [2]
Timeline
- Started, Detected 2023-09-22
- Disclosed 2023-10-31
- 39 days
Attack or cause
- Method
- [Ransomware]
- Impact
- [Data leak][Service outage][Extortion]
- Entry point
- Unknown
Data exposed or at risk
Organizations involved
[Breached][Critical]Tokyo, MinatoWholesale and retail trade300,000 leaked
Baccarat Pacific K.K.
Sources
- [1][News]バカラが不正アクセス被害、国内で個人情報30万件が流出の可能性Nikkei xTECH · 2023-11-02
- [2][News]バカラのサーバに不正アクセス、オンラインショップ等の活動に制限ScanNetSecurity · 2023-10-23 08:05
- [3][News]バカラ 不正アクセス続報、顧客情報の一部公開を確認ScanNetSecurity · 2023-11-09 08:05